Penetration Testing Manager

The role

Your role as Penetration Testing Manager is to lead the security testing function and support the growth of the offensive testing capabilities of the business, where you’ll be responsible for managing a highly technical team through penetration testing engagements, utilising the latest tools and processes.

Leveraging your managerial, technical and communication skills, you’ll scope engagements, plan work schedules and manage the workloads of the Penetration Testing team, whilst managing stakeholder expectations and competing work priorities whilst ensuring the team delivers high-quality and valuable outputs.

To be successful in the Penetration Testing Manager role, you’ll be proficient with different penetration testing methodologies and comfortable working with stakeholders across business functions to scope web application, infrastructure tests and coordinating red team engagements. You will be capable of managing your team through their understanding of security principles and penetration testing methodologies.

The team

Your small team of skilled Penetration Testers sit within the large and established Technical Security function, where collaboration and knowledge sharing is at the heart of what we do. Your team works closely with the other security teams including Architecture, Security Operations, Security Risk Management, Intrusions and Investigations and the wider business.

Your responsibilities

• You’ll own and evolve the penetration testing service for TalkTalk key stakeholders, whilst coordinating and running targeted pen tests, and identifying, prioritising and documenting remediation options for infrastructure and application vulnerabilities.

• With your deep understanding of testing methodologies and attack vectors you’ll champion technical knowledge sharing across the security team and wider business and drive cross-functional learning and development when testing across the security teams.

• You’ll support business projects and offer a leading security testing service, including detailed scoping and reporting, as well as support design activities to ensure solutions are compliant with relevant security policies, principles and standards.

• Whilst leading your team, you’ll also be accountable for resource planning and demand management and continuously developing their capabilities to ensure the smooth operation of a modern penetration testing function.

To be successful in the role

Essential:

• Proven hands-on technical experience in a security role working across a broad range of technologies.

• Coaching and supporting a small team of Penetration professionals.

Desirable:

• Direct line management and development of highly technical teams.

• In-depth hands-on security testing in different technologies within the Web Application, Infrastructure and Cloud space.

• A recognised qualification relating to Penetration Testing, such as CREST, Tiger Scheme, SANS and/or OSCP/OSCE.

• Scripting/Coding experience.

If this Penetration Testing Manager sounds like you, please apply and we will be in touch soon!

As a recognised Top 50 Inclusive Employer in the UK, we know that diversity means success and innovation. We want our workplace to reflect the communities and customer we serve. Being inclusive is part of our DNA; we are all 100% human, and we create a culture where you can truly be yourself.

We’re also not your usual 9-5. We are a dynamic workplace and we want to talk to you about how you like to work.